Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File:                     zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier:          8jaOxv+CEiq/Rh3pIGTRyLNjJqpTs87cKqS5rYyQliE=
Subject key identifier:   EB:D3:1A:DB:99:10:A6:6F:24:35:27:4E:5A:70:21:AF:C7:D2:4A:4D
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer:       /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial:       01962F069303EC7E283001206F406B06D554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number:          0B4F
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=)
                          2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: hXzpJzqEhcOpkvYdMg8WJVqSNwoAQ6BvRdvEYtM4GD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:03:ec:7e:28:30:01:20:6f:40:6b:06:d5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=ebd31adb9910a66f2435274e5a7021afc7d24a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:9a:42:64:b8:71:c5:e8:83:5d:4b:ae:df:
                    d1:24:6c:b4:ba:a6:44:c8:34:3a:12:e8:02:76:b2:
                    a9:9c:e8:2f:9e:e9:09:23:8f:52:18:e5:9f:7b:01:
                    8b:4f:67:e1:16:3c:1d:c4:97:0f:56:f0:e7:3f:05:
                    af:20:be:fa:37:87:01:ae:e6:fd:1f:84:0c:12:69:
                    ff:bf:31:5e:e4:9e:a4:1f:79:ef:39:39:6e:76:8d:
                    74:d7:90:35:69:33:b6:1d:27:bc:57:d5:22:29:52:
                    ce:86:6b:5d:92:f4:03:a2:91:ba:f4:a1:7e:aa:7b:
                    be:3f:9e:64:77:19:1d:78:b8:3c:f6:f0:27:63:6e:
                    55:63:38:a0:f8:27:75:c6:fa:a1:c1:fa:60:93:e2:
                    86:f8:4d:0d:b9:55:00:76:62:71:83:ce:9e:c2:f9:
                    05:f1:3c:69:15:d0:48:10:50:80:3c:7d:c6:95:e6:
                    92:04:44:ae:4f:3e:7a:bb:64:28:3f:4e:ce:4a:b0:
                    87:e3:15:b7:9a:9b:92:a6:77:d8:89:28:c8:1f:4b:
                    0c:b4:54:e9:a1:d5:89:7a:80:fb:ca:4c:a7:db:19:
                    43:5d:d2:7f:36:1e:4a:45:6f:75:b3:a1:02:8e:e4:
                    f3:8b:2c:1d:b1:e2:74:87:fd:25:8d:c6:fa:b4:96:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D3:1A:DB:99:10:A6:6F:24:35:27:4E:5A:70:21:AF:C7:D2:4A:4D
            X509v3 Authority Key Identifier:
                keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:a2:b8:28:b8:da:95:bb:fa:33:bd:88:18:53:da:d0:35:
         57:6f:f8:a5:18:2a:cb:50:0e:a8:55:06:02:0d:a9:fa:81:d0:
         22:31:fe:18:48:b1:c0:35:c2:1c:9e:20:b8:27:38:a8:27:f3:
         6f:2b:ca:6c:7e:62:4c:9b:2c:f8:56:20:f2:28:92:4d:cd:b5:
         36:0a:bd:0c:a1:df:81:6d:31:d1:0e:b0:c2:4a:ac:ed:cc:75:
         19:b5:5a:33:cd:e9:ed:7d:92:a9:d6:5d:07:4e:15:70:c2:6e:
         d6:a4:0d:31:8c:83:1b:41:79:59:6e:4a:ac:fd:77:d8:bb:60:
         94:5a:a1:e1:42:b0:7a:88:36:86:16:68:ab:8f:e8:58:8e:50:
         b8:9b:13:d5:04:a8:01:8f:30:51:1d:38:b1:b0:20:6d:34:7a:
         67:ab:3f:9e:14:e5:13:16:70:27:af:88:8d:3d:11:0c:14:cf:
         fe:df:cf:3a:58:c0:de:e6:09:aa:ea:40:5c:da:5c:67:4c:b8:
         fa:18:6a:01:b3:fc:56:e3:9f:d8:ee:5b:71:55:19:52:6b:46:
         bc:d5:6d:17:ba:79:c5:63:ac:3a:21:f1:6e:e8:e2:63:4e:a4:
         ef:19:e8:66:eb:a6:45:2a:f7:7c:f5:6c:97:f3:ba:63:3f:b0:
         e3:89:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----